Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Pem-PEevueCl_DA78thKc_IIL6w.cer
File: Pem-PEevueCl_DA78thKc_IIL6w.cer (raw, json)
Hash identifier: K+Ebd6xfN/2r/zTWWnTAYsYWxCy09uxhS/DL3apR0rE=
Subject key identifier: 3D:E9:BE:3C:47:AF:B9:E0:A5:FC:30:3B:F2:D8:4A:73:F2:08:2F:AC
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0199E6E06644CC55706DD36E830BAD79848D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0d/ef76a6-c4e1-427f-973b-2c1c29014548/1/Pem-PEevueCl_DA78thKc_IIL6w.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0d/ef76a6-c4e1-427f-973b-2c1c29014548/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 15 Oct 2025 07:58:09 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 91.220.179.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 01:22:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:e6:e0:66:44:cc:55:70:6d:d3:6e:83:0b:ad:79:84:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Oct 15 07:58:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3de9be3c47afb9e0a5fc303bf2d84a73f2082fac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:bc:98:47:b6:3e:b1:2c:7a:76:da:47:18:bf:
7d:ce:29:b4:2e:25:2e:90:99:2d:d6:ef:91:b7:97:
30:3c:eb:94:7b:9f:b0:97:ef:07:b8:54:bc:7e:54:
d6:de:78:b0:22:d3:ae:f0:46:a1:58:96:b4:48:9c:
06:ed:8c:17:46:65:1a:0c:d6:d8:2a:de:f3:d8:3c:
c4:dd:c1:c0:24:ac:0e:39:db:64:9e:6e:28:0c:7d:
1d:80:19:74:d4:2d:08:9b:ea:8f:c5:91:c1:c5:e3:
db:9b:0a:bd:72:db:fe:d5:c1:b2:96:57:56:c7:fd:
cb:38:03:87:c3:08:91:c1:7a:e0:6c:2b:80:10:e6:
f0:c8:fc:7d:6c:de:78:3b:45:6d:9d:f1:cd:00:33:
ae:ee:6f:b5:4a:11:d7:18:db:af:83:2a:c5:d0:85:
a3:21:67:9a:da:1e:eb:37:55:98:72:c7:0f:df:6b:
bd:6e:e7:f1:16:66:c0:d7:f7:da:f8:68:9f:93:5f:
b3:f6:71:ef:d9:20:71:84:11:1b:81:2e:7a:0f:5c:
64:93:73:3c:ba:76:03:d4:f9:5c:06:ce:f4:81:98:
40:0d:f1:d6:3b:92:72:90:b4:77:cb:ec:7b:b9:92:
a1:4d:80:18:ef:5b:f4:c0:2f:56:7d:b4:2b:71:d8:
38:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:E9:BE:3C:47:AF:B9:E0:A5:FC:30:3B:F2:D8:4A:73:F2:08:2F:AC
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/ef76a6-c4e1-427f-973b-2c1c29014548/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/ef76a6-c4e1-427f-973b-2c1c29014548/1/Pem-PEevueCl_DA78thKc_IIL6w.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.220.179.0/24
Signature Algorithm: sha256WithRSAEncryption
05:18:ec:f9:c1:c0:23:9c:0e:c6:67:92:3b:31:97:58:1d:da:
0f:4f:59:91:a6:e7:7a:77:5c:7f:b3:a3:e6:ad:66:26:2b:f5:
85:61:11:c6:e6:26:09:48:b6:e2:79:26:65:6b:78:29:b4:7f:
32:fa:84:90:b1:0a:9a:cb:a5:56:75:ed:29:5c:cc:cf:22:2a:
3d:19:40:20:cb:40:c6:b7:01:b7:49:4d:dc:7f:61:d3:5e:04:
78:1d:3e:03:e9:18:13:98:aa:51:50:90:6e:8e:f0:bc:0a:3a:
a6:65:c4:50:35:9b:77:84:7b:5f:10:f2:b9:55:ba:2c:26:10:
38:a6:a9:3e:50:4d:1b:47:1a:51:89:d4:76:d2:89:36:d4:1b:
85:69:09:62:7d:0c:a0:24:f3:24:2c:e3:f9:ec:86:33:20:fd:
55:23:03:52:f8:97:9a:79:f1:ba:ca:15:9b:9c:fd:2e:26:08:
3f:0c:e7:fd:82:ac:e1:19:26:18:f1:1d:ba:6e:86:39:82:84:
00:bd:e0:26:ab:5c:22:e1:62:a4:d8:0b:8d:63:77:60:45:c2:
dd:b2:81:1a:17:0a:21:6b:f7:7e:bd:61:27:87:7f:cd:70:d9:
0b:33:9a:c3:d9:2e:ca:7f:a4:d1:e8:b0:6d:78:82:a4:03:c1:
c8:f1:70:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 10:29:07 2025 by rpki-client